CVE-2026-86845: medium-severity vulnerability in Red Hat Fast Datapath for RHEL 10
Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.2%
A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Affected products
Red Hat · Fast Datapath for RHEL 10Red Hat · Fast Datapath for RHEL 8Red Hat · Fast Datapath for RHEL 9Red Hat · Red Hat Enterprise Linux 10Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat OpenShift Container Platform 4Red Hat · Red Hat OpenStack Platform 13 (Queens)Related CVEs — Red Hat Fast Datapath for RHEL 10
In the same product, most dangerous first.
CVE-2023-3966HIGHOpenvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packetEPSS 1.0%CVE-2023-3153MEDIUMService monitor mac flow is not rate limitedEPSS 1.0%CVE-2026-5367HIGHOvn: ovn: information disclosure via crafted dhcpv6 packetsEPSS 0.9%CVE-2024-2182MEDIUMOvn: insufficient validation of bfd packets may lead to denial of serviceEPSS 0.8%CVE-2026-5265MEDIUMOvn: ovn: heap over-read in icmp error response generationEPSS 0.6%CVE-2024-11614HIGHDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryEPSS 0.6%